This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KuHXizgSIs2I12qOk8RLujyACKI.cer
File:                     KuHXizgSIs2I12qOk8RLujyACKI.cer (raw, json)
Hash identifier:          eqzadgxe2VqIV5akSuiwrWybkaTOZwwU6DYWGTasS3E=
Subject key identifier:   2A:E1:D7:8B:38:12:22:CD:88:D7:6A:8E:93:C4:4B:BA:3C:80:08:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019A745F65304E0B5E55086FE5FA9333C0E6
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Tue 11 Nov 2025 19:23:20 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 214781
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:74:5f:65:30:4e:0b:5e:55:08:6f:e5:fa:93:33:c0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Nov 11 19:23:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2ae1d78b381222cd88d76a8e93c44bba3c8008a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:95:1f:da:ab:85:87:c3:48:c2:44:bc:8e:
                    55:84:03:dd:68:0b:99:24:d5:55:9f:94:52:54:9d:
                    21:54:7d:06:c6:80:5f:95:37:1b:95:05:7a:a8:c9:
                    92:11:ec:54:9a:c0:98:a3:0b:85:7f:65:4c:3a:6f:
                    19:04:5d:48:a9:93:91:1c:92:49:2c:2b:1d:90:be:
                    14:78:1a:6a:15:2b:8d:bb:97:1a:f2:93:74:a2:c7:
                    96:29:81:39:29:09:17:36:46:5d:5f:50:4b:8b:58:
                    3c:fa:01:53:b6:d9:af:62:4d:fe:94:c2:eb:00:55:
                    01:78:c1:7a:cb:c0:80:33:45:9e:6a:a4:e4:48:41:
                    0b:70:55:aa:41:57:08:78:58:e3:70:45:1a:e7:5f:
                    81:b4:75:59:5b:a9:52:a7:8c:e7:d1:ee:bb:c5:50:
                    29:17:b0:ac:56:4d:ff:61:42:0a:40:35:7d:bd:e0:
                    31:a0:05:f0:44:04:9a:03:67:07:bc:d7:d2:ca:d7:
                    29:93:b3:d9:38:ed:12:dc:42:a0:31:61:76:45:f5:
                    26:6d:84:17:a9:6b:65:75:45:a8:72:a9:a1:06:9a:
                    fb:d2:ab:77:f5:12:d7:75:d3:85:7f:af:8e:cb:71:
                    5f:2d:96:63:19:69:d0:01:ce:30:4e:c5:76:13:ef:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E1:D7:8B:38:12:22:CD:88:D7:6A:8E:93:C4:4B:BA:3C:80:08:A2
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d3f2f4-3f8e-4a73-8c8c-d7c8f88753d4/1/KuHXizgSIs2I12qOk8RLujyACKI.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  214781

    Signature Algorithm: sha256WithRSAEncryption
         50:5c:45:01:44:48:c7:f8:93:e6:db:b8:d3:6d:08:6e:4d:60:
         1d:73:7d:e8:ad:95:3a:01:22:90:21:22:1a:96:ce:6d:e2:08:
         ea:25:80:df:55:c9:66:67:1d:0c:dc:a0:17:b8:f9:77:bd:2b:
         55:ad:46:50:d1:30:cd:f7:08:1c:c8:1f:79:f9:b9:cf:1c:fd:
         49:ee:a6:73:7d:7d:03:f7:5e:ae:65:ba:6f:d4:76:2b:54:5f:
         98:93:80:d1:23:d0:46:dc:b2:c0:78:02:fc:af:4f:c9:d4:13:
         19:7b:72:60:39:3b:18:83:fb:aa:cf:b3:24:8b:dc:67:f1:45:
         e3:72:49:62:27:95:37:fe:14:7d:d5:df:7f:51:36:f6:35:7e:
         fb:60:47:0e:50:d8:20:69:35:5f:a0:c7:73:44:40:00:53:e2:
         3d:d3:a8:e2:8b:cb:3b:11:1a:5b:fc:c9:c4:87:fb:5c:0b:8c:
         4b:c8:6f:fc:97:b8:1a:c8:74:80:60:9a:b0:1c:f8:08:a4:d1:
         96:67:5c:3d:a1:96:8a:74:a1:06:5a:bc:00:76:4d:f4:1a:90:
         c0:74:90:ed:b2:66:4f:5c:08:c9:18:ef:ea:6a:77:92:a7:45:
         6b:7b:c1:e1:da:47:dd:5d:9f:cd:a0:89:3c:54:a7:06:b1:18:
         55:5d:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----